ClawHub
Back to skill

Security audit

zoodata

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed ZooData API client/reference that uses an API key and may consume credits, but I did not find hidden, deceptive, destructive, or unrelated behavior.

Install only if you intend to give ZooData API access to this skill. Prefer ZOODATA_API_KEY as an environment variable; if you use ~/.zoodata/config.json, restrict file permissions because it stores a reusable API key. Confirm broad scans before running them because composite workflows can make many API calls and consume credits.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (6)

Lp3

Medium
Category
MCP Least Privilege
Confidence
82% confidence
Finding
The skill uses sensitive capabilities (environment variable access, local file reads, and network access) but does not declare corresponding permissions in a machine-readable way. That creates a transparency and policy-enforcement gap: users or orchestration systems may treat it as documentation-only while it can actually read credentials and make authenticated outbound requests.

Tp4

High
Category
MCP Tool Poisoning
Confidence
95% confidence
Finding
The skill is presented as an API reference, but its content clearly describes active execution of a bundled CLI, credential discovery, live authenticated API calls, retries, pagination, and multi-call workflows that consume credits. This mismatch is dangerous because users and platforms may authorize or invoke it under the assumption it is passive documentation, when it actually performs stateful external operations with secrets.

Description-Behavior Mismatch

High
Confidence
89% confidence
Finding
The skill metadata describes an API-reference/documentation helper, but the script is an operational client that performs authenticated live API calls and large composite workflows. This mismatch can mislead users and calling agents into invoking networked actions and spending credits when they expected passive documentation behavior.

Description-Behavior Mismatch

Medium
Confidence
83% confidence
Finding
The Local Review Toolkit is presented as documentation/reference, but the code operationalizes prompt generation, review extraction workflows, and local aggregation logic for downstream LLM use. That increases data-processing scope beyond what a user may expect from an API reference skill, especially when handling review text and derived analysis artifacts.

Session Persistence

Medium
Category
Rogue Agent
Content
- **Get a free key** (1,000 credits, no credit card): https://zoodata.ai/en/api-keys
   - **Configure** via one of:
     - `export ZOODATA_API_KEY='hms_live_xxx'` (session only)
     - `mkdir -p ~/.zoodata && echo '{"api_key":"hms_live_xxx"}' > ~/.zoodata/config.json` (persistent)
4. **Optionally** state in **one sentence** what the workflow will produce once the key is configured (deliverable shape only — no numbers, no market color, no "common sense" preview).

## On 401 Invalid Key
Confidence
80% confidence
Finding
mkdir -p ~/.zoodata && echo '{"api_key":"hms_live_xxx"}' > ~/.zoodata

Session Persistence

Medium
Category
Rogue Agent
Content
print("    export ZOODATA_API_KEY='hms_live_yourkey'", file=sys.stderr)
    print("", file=sys.stderr)
    print("  Method 2: User-home config (persistent, shared across all skills)", file=sys.stderr)
    print("    mkdir -p ~/.zoodata", file=sys.stderr)
    print('    echo \'{"api_key":"hms_live_yourkey"}\' > ~/.zoodata/config.json', file=sys.stderr)
    print("", file=sys.stderr)
    print("Get a free key at https://zoodata.ai/en/api-keys", file=sys.stderr)
Confidence
80% confidence
Finding
mkdir -p ~/.zoodata", file=sys.stderr) print(' echo \'{"api_key":"hms_live_yourkey"}\' > ~/.zoodata

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.